Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation

A user could be tricked into opening a malicious design file (.SPP format), causing Tecnomatix Plant Simulation to crash or allowing an attacker to execute arbitrary code on the engineering workstation with the user's privileges.

Manufacturing and process engineering teams who use Siemens Tecnomatix Plant Simulation for factory design, layout, and simulation work. This affects engineering workstations running V2302 or V2404 versions of the software.

An attacker crafts a malicious Tecnomatix Plant Simulation file (.SPP format) with a specially crafted payload that overflows a buffer when the application parses the file. The attacker tricks a user (via email, file sharing, or social engineering) into opening the file. When the application reads the file, the buffer overflow triggers, causing a crash or allowing code execution on the workstation.